Nonce Checks Failing for Private Groups

[Iridox]

Running BuddyPress 1.2.8 on Wordpress 3.1.4

Expected behavior: Clicking an action such as Accepting a join request or promoting a member to admin status to complete successfully.

The Result: Nonce check fails and WordPress returns a "Failure Notice" with a "try again" link.

I can reproduce this on a completely fresh copy of wordpress and buddypress (same versions as above.)

When I removed the check_admin_referrer() calls in bp-groups.php expected behavior resumed, but I assume I just killed the security feature entirely.

[DJPaul]

I just tested promoting a group member to admin, accepting a group invitiation, on a totally clean install with those versions and it worked for me.

[Iridox]

Not sure if this would make a difference or not, but the test server runs on NGINX, not Apache.

[johnjamesjacoby]

Are you able to switch to BuddyPress trunk and duplicate this issue in your setup?

[boonebgorges]

These actions are working fine for me on the latest BP trunk. If you can reproduce them with BP trunk, please reopen the ticket.

[johnjamesjacoby]

Moving closed ticket out of Awaiting Review.

[cnorris23]

For posterity, see #4161 for a possible fix